NVD security advisoryCritical
Critical advisory for Incorrect reference resolution in DevToo
CVE-2026-121200 · Reported 3 Nov 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
Incorrect reference resolution in DevTooAffected product
Advisory overview
Incorrect reference resolution in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
